SKILLS:

Firewalls: Cisco ASA 5585, 5520, 5505, CheckPoint 2000 VPN - 1/Firewall-1 v4.12/NG FP3, Juniper Netscreen, Fortigate.

Network Management Tools: CiscoWorks, Solar-Winds Orion MRTG, and Cisco IOS.

WAN routers/devices: Cisco ASR 1002-X, 7200/3800/3700/2800/2600 Series.

Switches: Cisco Nexus 7000, 5000, 2000, 1000v Series, Cisco UCS 6200, Cisco Catalyst 6513, 6509, 3550G, 3750G, 3500-XL.

Routed protocols: TCP/IP, MPLS, Frame Relay, ISDN, and PPP. Routing Protocols EIGRP, OSPF, and BGP4.

PROFESSIONAL EXPERIENCE:

Sr. Network Specialist

Confidential, Lakewood, CO

Responsibilities:

• Managed and supported network infrastructure as a lead network engineer focusing on the Data Center virtualization environment
• Configured and maintained the Cisco Nexus 7000, 5548 switches, and 2000 FEX for its north - south traffics in the Data Center. (vPC, VDC.)
• Deployed, configured, and managed the network component of Cisco Flexpod including Cisco Unified Fabric 5548 switches, Cisco 1000V virtual switches. (FCOE, FC, VSAN, Zoning, and Zone-set). Managed and monitored the west-east traffics in the Data Center.
• Troubleshoot and configured Cisco UCS 6200 Series Fabric Interconnect.
• Took responsibility for Data Center routines Deployed and Configured corporation edge router Cisco ASR1001X to realize to Internet traffics failover and load balance.
• Managed, configured the VPN hub routers in a Hub-Spoke worldwide environment.
• Replaced the legacy VPN hub routers with new Cisco ASR1002X routers in production lines without outages. Supported VPN spoke sites over 100 branch offices.
• Planed, designed, and worked on the project of a new WAN infrastructure using Cisco iWAN technology. (DMVPN, NHRP, PfR, MC)
• Configured and managed Cisco 5585 ASA for the enterprise headquarter office and other Cisco 55xx ASA for some of branch offices. Tasks included supporting AnyConnect clients, NAT, DMZ etc.
• Managed and designed the routing in Data Center by implementing Cisco EIGRP protocol. Configured Cisco multilayer switches to realize the layer 2, 3 redundancy, fail-over, and load-sharing to obtain the high availabilities. (802.1q VLAN Trunk, 802.1w Rapid-PVST+, Ether-Channel with LACP, HSRP.)
• Supported WAN for entire enterprise
• Managed, configured, and designed cooperation WAN with a worldwide MPLS network provided by ISP. The tasks included routings advertisement and control on BGP, and EIGRP redistribution into the BGP and vice versa
• Participated branch offices migration by planning, designing, and implementing the local networks and connecting local networks to corporation headquarter via the MPLS or VPN tunnel based on the requirement or situation.

Sr. Network Consultant

Confidential, Longmont, CO

Responsibilities:

• Took responsibility for the enterprise data network with WAN, LAN, VPN, and Firewall.
• Managed Cisco series routers and switches in a large scale and multi-layer Data Center environment.
• Upgraded Cisco 650x series CatOs to IOS.
• Troubleshoot issues of the enterprise data networks. (Cisco 7200, 6500, 3800, 3750 series)
• Managed, designed, and extended the enterprise WAN and MAN infrastructure. (MPLS, PPP, frame-relay, Multi Bundled T1s, T3, OC3, Packet Over SONET, Ethernet Over SONET, Cisco ONS 15454)
• Managed and configured edged routers to achieve fail-over and load sharing on multi-homing Internet links.
• Realized the dynamic routing and redundant connections in the enterprise internal and edge networks. (BGP4, OSPF)
• Configured Cisco multilayer switches to realize the layer 2, 3 redundancy, fail-over, and load-sharing to obtain the high availabilities. (802.1q VLAN Trunk, 802.1w Rapid-PVST+, Ether-Channel with LACP or PAgP, HSRP, VSS)
• Implemented the Cisco Unified Wireless solution for Wireless LAN. Configured the Cisco wireless Wism, WCS. Upgraded Cisco wireless mode from the Autonomous to Light Weight mode. Deployed the Cisco Air LAP 1242G access points. (Wireless Service Mode, Wireless Control System, Light Weight Access Point)
• Managed the Juniper Netscreen firewall through the NSM.
• Setup and configured Juniper Firewall clusters (SSG 550). Implemented NSRP to realize firewall failover and high availability.
• Configured and implemented the Cisco Web-VPN solution.

Sr. Network Engineer

Confidential, Highlands Ranch, CO

Responsibilities:

• Took fully responsibility for all aspects of WAN/LAN in the enterprise.
• Designed, implemented, and maintained the enterprise network infrastructure.
• The tasks accomplished included planning IP address scheme, establishing the enterprise WAN/LAN network infrastructure, renumbering network address, and migrating networks from a parent company to a new and independent company.
• Designed, implemented, operated, and maintained two Data Centers in the enterprise with 23 remote branch offices.
• Implemented enterprise WAN back-bone with the MPLS. Maintained the redundancy WAN back-up links with IPsec VPN tunnels.
• Configured Cisco routers and routing protocols such as OSPF, BGP to distribute the internal routes and get high availability on WAN backbone.
• Provide engineering support for the deployment and configuration of servers and VMware in the Data Center. Troubleshoot Windows 2003/2008 and Linux OS issues
• Resolved issues related to VMware ESX(i) and Vcenter deployment, configuration and performance issues
• Applied analytical skills and technical knowledge to solve product and network problems of moderate to high complexity.
• Designed and implemented the enterprise security infrastructure, such as redundant firewalls with fail-over and load-sharing. (Checkpoint NG/AI, Nokia Clusters, and VRRP. Cisco PIX and ASA Firewalls)
• Set up and maintained the client-to-site VPN. (Check Point VPN 1 and SecureClient). Managed user authentication, client software distributions etc. (RADIUS, MS Internet Authentication Service)*
• Configured and managed the F5 appliance to obtain the loading balance for Web access.

Sr. Network/System Engineer

Confidential, Boulder, CO

Responsibilities:

• Took responsibilities for all aspects of design, management, and maintenance tasks of LAN/WAN.
• Planed and designed the enterprise network infrastructure.
• Implemented the enterprise internal network and intranet for multiple offices in worldwide.
• Configured and managed variety of Cisco routers and Adtran devices in a growing multi-protocol internetworking environment.
• (TCP/IP, ISDN, Frame Relay, PPP, T1, FT1, T3, Channel T3, and OC3)
• Configured and maintained layer 2 and layer 3 switches (Cisco Catalyst 6509-NEB, 3550/12G, 3508G, 3500-XL, 2948G) and hubs in a Gigabit Ethernet LAN and VLAN environment.
• Controlled and managed the budget of all network devices, and purchased all network devices in the enterprise.
• Was in charge of network securities for the enterprise.
• Managed and maintained multiple sites Cisco PIX (Cisco PIX 4xx/5xx serials) and Checkpoint firewalls (Checkpoint 2000 VPN-1/Firewall-1 v4.1.x & NG FP-x) on a central management site. Planed, installed, configured, and implemented the Cisco PIX or Checkpoint firewalls for setting up a new branch office in worldwide.
• Defined the enterprise network security policy with IT manager.
• Deployed and implemented the security policy on the firewalls.
• Logged and monitored inbound and outbound network traffics to prevent and detect possible hacker attacks.
• Managed and maintained the enterprise VPN and remote access server.
• Designed, configured, implemented VPN in the site-to-site model on the Cisco PIX, Cisco routers, and Checkpoint firewalls.
• Supported more than twenty full meshed VPN tunnels in worldwide. (IPSec, IKE) Configured and maintained VPN in the client to site model in a Checkpoint SecuRemote and SecureClient environment.
• Troubleshot problem for SecuRemote users.
• Configured the enterprise RDIUAS server for authenticating all remote VPN clients and dial-in users.
• Managed Internet, telecommunication lines, and service contracts.
• Ordered and managed and Troubleshot Internet and telecommunication lines, which included PRI, BRI, T1, T3, Channel T3, and OC3 lines.
• Managed service contracts of all Internet, telecommunication lines.
• Managed and ordered service contracts for all network devices, which included Cisco, Adtran, and Lucent devices.